Privacy

Awalux AG's data protection principles

‍

Awalux AG respects your right to data protection and is committed to the following key principles:

We protect your privacy and want to offer you a service tailored to your needs.
Personal data is collected for specific purposes on the basis of your consent or a legitimate interest when you contact us.
You have the right to information and access to your personal data at any time and can request its correction or deletion.
We do not sell your personal data to third parties. However, if necessary and with express subsequent mention or if you have given your consent, we may pass on your data to group companies, brand licensees, partners, and other service providers. In this case, their own data protection guidelines may also apply.
We take all reasonable measures to ensure the security and protection of your data against misuse.

We are delighted that you are visiting and using our websites, online shops, applications, and social media pages (the “websites”). We hope that during your visit you will learn more interesting facts about awalux AG, the history of our brands, and our products and services.

This privacy policy explains how and for what purposes we use the information we collect about you through our websites, our offline programs, your visits to our stores, or during our festive events.

‍

1. WHEN DOES THIS PRIVACY POLICY APPLY?

‍

Awalux respects your right to privacy when you use our websites or when you interact with us in our stores or during our events. By using our websites or providing personal information, you accept the practices described in this Privacy Policy. If you do not agree with this privacy policy, we recommend that you do not use or visit our websites or provide any personal data.

Awalux reserves the right to change this privacy policy at any time. You should therefore check it regularly for changes. The changes will take effect when they are published on this website, and we will inform you of any significant changes in an appropriate manner.

‍

2. HOW DO YOU GIVE YOUR CONSENT?

‍

We will only collect, use, or disclose your personal data if this can be done in a fair and lawful manner. In most cases, we will explicitly ask for your consent. We will also process your personal data for legal reasons, to fulfill a contract, or on the basis of our legitimate interests.

We will ask for additional consent if we need to use your personal data for purposes not covered by this privacy policy. You are not obliged to give such consent. However, if you decide not to do so, your access to some activities may be restricted. Finally, you can withdraw your consent at any time with effect for the future.

‍

3. HOW IS THE DATA COLLECTED BY AWALUX?

‍

3.1 PERSONAL DATA

This Privacy Policy applies to personal data that awalux collects from individuals through a variety of sources (e.g., websites, online stores and mobile applications, social networking sites, events, or customer service) and, in some cases, through third parties.

3.2 TYPE OF PERSONAL DATA COLLECTED

Awalux only collects personal data that is necessary for a specific purpose. We collect the following personal data:

Personal data that you provide to us directly

We collect personal data when you request information about us, purchase our products, register for a competition, or use one of our company's applications. You will be informed which types of data are mandatory and which can be provided by you on a voluntary basis. The types of personal data include:

Personal contact information such as name, address, email, phone number, image, and demographic information, including age, gender, household, or place of residence.
Account registration information when you open an account with us, or your information when you complete a survey (name, email address, login ID, username, password, and security question).
Payment information such as name, credit card number, expiration date, billing address when you purchase our products online or in one of our stores.
User-generated content, including any content (e.g., photos, videos, and personal experiences) you create and share by uploading it to our websites.
Employment-related information, such as resumes and references, when you apply for a job with us.
Data about the region you specify when you allow us to share your location to locate our company headquarters.

Information collected automatically when you use our website

We also use cookies and other tracking technologies that collect certain types of information, such as IP addresses, browser settings, and web pages you view, as well as information about your navigation experience (at the time of your visit) when you use our websites and applications.
We collect personal data from third-party social networking websites (e.g., the “Like” feature on Facebook, the “Follow” feature on X, or the YouTube feature) via so-called social plugins. The purpose of data collection by awalux via plugins is to enable you to publish our content on your own social media pages. For further processing and use of the data by the providers on their websites, as well as the rights and setting options for protecting your data, please refer to the privacy policies of the respective providers. If you do not want awalux or the third-party social network website to associate the data collected via our websites with your account on that social network, you must log out of the respective social network website before visiting our websites.

‍

4. ABOUT CHILDREN'S PERSONAL DATA

‍

Most of our websites are designed for and intended for adults. If a website offers content for a younger audience, we will obtain the consent of a parent or guardian before collecting personal data if we deem it appropriate or if required by applicable law (the age of consent varies by country). If personal data from children has been submitted to us, it will be deleted from our database. The child's parents (or legal guardians) can contact us and request that the data be deleted or that they be logged out (see contact details below). For this purpose, we may request a copy of an ID confirming the parental or educational relationship.

‍

5. WHY DO WE COLLECT AND USE PERSONAL DATA?

‍

Awalux collects and uses personal data for a variety of purposes. You may object to any of these data processing operations at any time (see contact details below). Your data is collected for the following purposes:

to enable you to create and access your user account, including any loyalty programs associated with your account. In these cases, we process your data to fulfill a contract or request in accordance with Art. 31(2) revDSG, Art. 6(1)(b) GDPR.
To process and ship your orders and purchases, we process your data to fulfill a contract or request in accordance with Art. 31(2) revDSG, Art. 6(1)(b) GDPR.
To engage consumers and provide you with a personalized service, such as:
Sending you information, products, or samples that you have requested. In these cases, we process the data with your consent in accordance with Art. 31(1) revDSG, Art. 6(1)(a) GDPR.
To involve you more actively in our products and services, for example by publishing your content. In these cases, we process the data with your consent in accordance with Art. 31(2) revDSG, Art. 6(1)(a) GDPR.
To contact you regarding your questions, complaints, or comments by email, letter, or telephone. In these cases, we process your personal data, including any special categories of personal data that you have provided with your prior consent, in order to process your specific request in accordance with Art. 31(2) revDSG, Art. 6(1)(b) GDPR.
For use in connection with competitions or promotions in which you have participated, or for loyalty programs in which you participate, such as:
To administer competitions and promotions. In these cases, we process the data to fulfill a contract in accordance with Art. 31(2) revDSG, Art. 6(1)(b) GDPR.
to publish the winners' data, based on the winner's consent (Art. 31 (1) revDSG, Art. 6 (1) lit. a GDPR; where necessary), a legal requirement (Art. 31(2) revDSG, Art. 6(1)(c) GDPR) or our legitimate interest (Art. 31(2) revDSG, Art. 6(1)(f) GDPR).
to enable you to participate in our loyalty program and interact with us within the framework of this program. In these cases, we process the data with your consent, if necessary, in accordance with Art. 31(1) revDSG, Art. 6(1)(a) GDPR, and in order to carry out the corresponding loyalty program in accordance with Art. 31(2) revDSG, Art. 6(1)(b) GDPR.
To contact you for marketing purposes, including direct marketing and social functions within social networks. In the following cases, you give your consent to the processing of this data in accordance with Art. 31(1) revDSG, Art. 6(1)(a) GDPR:
To send you our newsletters if you have subscribed to such a service.
To suggest products or services that we believe may be of interest to you.
To offer you the opportunity to participate in competitions or promotions.
To contact you via the mobile messaging service if you have subscribed to such a service. If this is done through a partner, we will also inform you of their name.
To improve our websites and/or combine them with third-party information to understand your needs and provide you with better service, including customizing websites and products for you and providing interest-based advertising. In the following cases, we have a legitimate interest in processing the data in accordance with Art. 31(2) revDSG, Art. 6(1)(f) GDPR, unless otherwise specified:
to evaluate the use of our websites using data such as information about account registration, computer use, and/or previous use of the website.
to evaluate the use of our websites with tracking tools that are used on the basis of the user's consent in accordance with Art. 31(1) revDSG, Art. 6(1)(a) GDPR or on the basis of our legitimate interest in accordance with Art. 31(2) revDSG, Art. 6(1)(f) GDPR.
To improve our products and services using demographic information, consumer profiles, and consumer feedback. In these cases, we process your data with your consent in accordance with Art. 31(1) rev DSG, Art. 6(1)(a) GDPR.
To analyze the effectiveness of our advertising and promotions using cookies or tracking technologies with your consent in accordance with Art. 31(1) revDSG, Art. 6(1)(a) GDPR or based on our legitimate interest in accordance with Art. 31(2) revDSG, Art. 6(1)(f) GDPR.
To personalize your website experience based on targeted advertising. In these cases, we process the data with your consent in accordance with Art. 31(1) revDSG, Art. 6(1)(a) GDPR.
To offer you social features via community forums, tell-a-friend programs, or social networking features such as Facebook Connect. In these cases, we process the data with your consent in accordance with Art. 31(1) revDSG, Art. 6(1)(a) GDPR.
to process your job application and, if applicable, to determine whether you may be suitable for other positions available at our company. In these cases, we process your data to fulfill a contract or to process a request in accordance with Art. 31(2) revDSG, Art. 6(1)(b) GDPR or with your consent (where necessary) in accordance with Art. 31(1) revDSG, Art. 6(1)(a) GDPR.
For internal governance, security, and case management. In the following cases, we have a legitimate interest in processing the data in accordance with Art. 31(2) revDSG, Art. 6(1)(f) GDPR:
To maintain the daily operation, maintenance, and security of the awalux websites.
To conduct demographic studies or audits.
To contact you for consumer research.
To manage risks, disputes, and records.
To comply with our legal and regulatory obligations. In these cases, we process your data to the extent necessary to comply with legal obligations to which we are subject, in accordance with Art. 31(2) revDSG, Art. 6(1)(c) GDPR.

‍

6. WHY DO WE SHARE PERSONAL DATA WITH THIRD PARTIES?

‍

Awalux does not share your personal data with third parties who wish to use this data for direct marketing purposes, unless you have given your specific consent to do so.

We share your personal data with the following categories of recipients:

our subsidiaries are all part of awalux AG
commercial partners such as brand licensees or co-organizers of a promotional campaign
service providers who provide services on behalf of awalux
authorities for legal reasons and potential buyers in order to execute a specific transaction.

Learn more about the recipients:

Subsidiaries, group companies, and brand licensees include:
Companies that receive a request and forward it to another company that is authorized to respond.
Companies that forward an application that should be addressed to another company.
Companies that transfer an account opened on their website to another company's website, if you so desire.

Commercial partners include:
Companies that receive a request and forward it to another company that is authorized to respond.
Companies that forward an application that should be addressed to another company.
Companies that transfer an account opened on their website to another company's website, if you so desire.

Commercial partners include:
Companies that participate in a joint promotion or loyalty program and wish to send you information if you have agreed to this. Both awalux and the partner may be joint data controllers for your personal data. This partner's privacy policy applies to the processing of your personal data by the partner.
At your request and provided that we are not legally obliged to retain your personal data, we will delete or anonymize your personal data on the websites. However, you should note that your personal data may still be available in the partner's databases if it was transferred before we received your request.
Service providers include:
Advertising, media, and marketing agencies that run and analyze our campaigns.
Postal and logistics companies that deliver a product you have ordered.
Data processing companies acting on behalf of awalux, such as recruiters, hosting or security service providers.
Providers of web analytics tools.
Authorities include:
Government or law enforcement agencies that require us to disclose information based on applicable law.

Potential buyers include
Companies to which awalux sells all or part of its business or a brand, or in connection with a merger, change of control, or liquidation of that business or brand.

The above persons and companies will process the data in their capacity as autonomous controllers in accordance with applicable law or as processors.

We require such third parties, who may be located outside the country from which you accessed the websites, to comply with all relevant data protection laws and security requirements with regard to your personal data. These third parties are obliged to ensure the same level of data protection as we do ourselves. If the level of data protection in a country does not comply with Swiss or EU data protection laws, we contractually ensure that the protection of your personal data complies with that in Switzerland or the European Economic Area (EEA) at all times.

‍

Learn more about data processing in the US

Various third-party providers are based in the US.

We would like to point out to users residing or based in Switzerland/the European Economic Area (EEA) that there are surveillance measures in place in the USA by the US authorities that generally allow the storage of all personal data of all persons whose data has been transferred from Switzerland/the EEA to the USA. This is done without differentiation, restriction, or exception based on the objective pursued and without an objective criterion that would allow the US authorities to restrict access to the data and its subsequent use to very specific, strictly limited purposes that could justify the interference associated with accessing and using this data. We also point out that there are no legal remedies in the US for data subjects from Switzerland/the EEA that would allow them to obtain access to the data concerning them and have it corrected or deleted, and that there is also no effective legal protection against general access rights on the part of the US authorities. We expressly draw the attention of data subjects to this legal and factual situation so that they can make an informed decision as to whether or not to consent to the use of their data.

Users residing in EU member states should note that, from the perspective of the European Union, the US does not have an adequate level of data protection, among other things due to the issues mentioned in this section. To the extent that we have stated in this Privacy Policy that recipients of data (such as Google, Facebook, and X) are located in the US, we will enter into a contract with them to implement appropriate measures, usually standard contractual clauses, to protect and secure the data in accordance with applicable data protection law.

If we offer social plugins or if you link your account to your accounts on third-party platforms such as Facebook, we may collect and process account-related information. When you connect to Facebook, your Facebook identity, name, email address, location, friend list, and profile picture will be stored and used to connect to your Facebook account to provide certain features on the websites. The use of data collected about you (or authorized by you) by third-party platforms is subject to separate privacy policies and your settings for that service. For more information, please refer to the privacy policy of the respective social network.

‍

7. HOW DO WE STORE AND SECURE DATA AND FOR HOW LONG?

‍

Awalux takes all reasonable technical and organizational measures to protect the personal data we store from loss, unauthorized access or disclosure, and other misuse.

Personal data will not be sold, shared, or otherwise disclosed or transferred to third parties, except as specified in the privacy policy.

We store your personal data for the period necessary to achieve the stated purpose, e.g. to send you our newsletter and other marketing communications, to answer questions, to resolve problems or to offer improved and new services, or to comply with legal requirements. We are entitled to store the data for a reasonable period of time after you have stopped using our services. After a certain period of time, we will destroy or delete it in a secure manner, unless there is a legal obligation to store the data for a longer period of time.

In particular, we only store personal data for as long as necessary:

to perform services that you have requested or to which you have given your consent, to the extent described above;
to use tracking, advertising, and analytics services in the context of our legitimate interest.

In general, the following retention periods apply:

Personal data of user accounts: No longer than 3 months after the user deletes his/her account; after this period, awalux only stores data that is necessary to fulfill legal or tax obligations.
Personal data in connection with purchase orders: The limitation period provided for by applicable law. In the case of the “Personalize packaging” offer, image and text files are deleted within 30 days if the order process is not completed. The same applies if the production of the individual packaging is rejected, e.g. due to illegal content.
Personal data from an online job application: As long as is reasonably necessary for your application, taking into account our need to respond to inquiries and comply with the legal requirements of applicable law. With your consent, we may retain your application for a longer period of time, e.g., to contact you if a suitable position becomes available in the future.
Personal data for marketing purposes: Until the user revokes their consent or objects to the processing of their data for marketing purposes.
Personal data of users who participate in awalux competitions: The limitation period provided for by applicable law.
Personal data of users who request information from awalux or send messages, complaints, or inquiries to awalux: Until the user's inquiry/complaint has been finally processed, after which it will be retained by awalux if this is necessary to safeguard the legitimate interests of awalux (e.g., in the case of complaints or inquiries for defense purposes).

We use technical and organizational security measures that we deem appropriate to protect your data stored with us from manipulation, partial or complete loss, and unauthorized access by third parties. Our security measures are continuously updated in line with technological developments.

We also take the protection of our own internal company data very seriously. Our employees and the service providers we commission are obliged to maintain confidentiality and comply with data protection regulations. Furthermore, they are only granted access to personal data to the extent necessary.

‍

8. WHAT ARE YOUR RIGHTS?

‍

You can object to data processing at any time. You have the following rights:

Right of access: You have the right to request access to your personal data stored by us at any time and free of charge, if we process this data. You can check which of your personal data is processed by us and that we use it in accordance with the applicable data protection regulations.

Right to rectification: You have the right to have incorrect or incomplete personal data corrected and to be informed of the correction. In this case, we will inform the recipients of the data concerned of the corrections made, unless this is impossible or involves disproportionate effort.

Right to erasure: Under certain circumstances, you have the right to have your personal data erased. In individual cases, the right to erasure may be excluded.

Right to restriction of processing: Under certain conditions, you have the right to request a restriction on the processing of your personal data.

Right to data portability: Under certain circumstances, you have the right to receive the personal data you have provided free of charge in a machine-readable format.

Right to lodge a complaint with the supervisory authority: You have the right to complain to a competent supervisory authority about the way your personal data is processed.

Right of withdrawal: You have the right to withdraw your consent at any time. However, processing activities carried out in the past with your consent will not become unlawful as a result of your withdrawal.

You can exercise your rights by contacting us.

If you have an account with awalux, you can use the relevant options directly in your account and, for example, change your opt-in/opt-out settings.

‍

9. HOW TO CONTACT US

‍

Awalux AG, Bahnhofstrasse 3, 5436 Würenlos, Switzerland, registered in Switzerland under company number CHE-191.713.270, operates this website and the other pages that refer to this privacy policy. Awalux acts as the “controller” for the personal data it processes under this Privacy Policy and for compliance with applicable data protection regulations, including the EU General Data Protection Regulation (GDPR).

If you have any concerns about a possible breach of your privacy or misuse of your personal data by us, or if you have any other questions or comments, contact us.